From b19f108a1e83602e73c9fde6a0aa97609e21b43c Mon Sep 17 00:00:00 2001 From: Chirag Pandya Date: Mon, 13 Jan 2025 13:03:07 -0800 Subject: [PATCH] feat: fix security warnings in torchft Summary: Update jinja to address dependabot reported alerts. 1. Jinja has a sandbox breakout through malicious filename 2. Jinja has a sandbox breakout through indirect reference to format method. Test Plan: Test on github --- docs/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/requirements.txt b/docs/requirements.txt index 792a00a..ad912dd 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -5,5 +5,5 @@ matplotlib papermill ipykernel ipython_genutils -jinja2==3.1.4 +jinja2==3.1.5 sphinx-autobuild